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TRANSITION (SOURCE =>DEST) 
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HANDLERACTION 


00=>00 


NO TRANSITION EXCEPTION 
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VECT XXX X86 CC EXCEPTION- HANDLER COiWERTS FROM NATIVE x86 CONVENTIONS. 
" ~ " SETS UP EXPECTED EMULATORAND PROFILING STATE 


01=>00 


VECT XXX TAP_CCEXCEPTION-HANDLERCONVERTSFROMx86TONATIVECONVENTIONS 


01=>01 


NO TRANSITION EXCEPTION 
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VECT X86 ISAEXCEPTION [CONDITIONAL BASED ON PCW.X86JSA_ENABLE FLAG] 
" " -SETS UP EXPECTED EMULATORAND PROFILING STATE 
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R1SC-X86 TRANSITION: 
MAP RISC CALL TO x86 

340 (FIG. 31) 



x86 -RISC TRANSITION: 
MAP RISC RETURN TO x86 

329,332 (FIG.3H) 



NO ISA TRANSITION: 
NO MAPPING REQUIRED 
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X86-RISC TRANSITION 
MAP RISC RETURN TO x86 

329,332 (FIG.3H) 



RISC-X86 TRANSITION: 
MAP RISC CALL TO x86 

343-348 (FIG. 31) 



NO ISA TRANSITION: 
NO MAPPING REQUIRED 
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FLAT 32-BIT "NEAR" ADDRESS SPACE 




RlSC-xSe TRANSITION 
MAP x86 RETURN TO RISC 

342 (FIG. 31) 



x86-*RISC TRANSITION: 
MAP x86 CALL TO RISC 

322 (FIG.3H) 



NO ISA TRANSITION; 
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RET 
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320 

X86-to Tapestry transition exception handler j/ 

II This handler is entered under the following conditions: 
// 1. An x86 caller invokes a native function 
// 2. An x86 function returns to a native caller 
// 3. x86 software returns to or resumes an interrupted native function following 
// an extemal asynchronous interrupt, a processor exception, or a context switch 
^321 

dispatch on the two least-significant bits of the destination address { 
case'OO" // calling a native subprogram 

// copy linkage and stack frame information and call parameters from the memory 
//stack to the analogous Tapestry registers 
LR -^[SP++1 // set up linkage register "^^^^ . 
AP^SP //address of first argument-^"'''^ 326 

SP ^ SP - 8 // allocate return transfer argument area ^327 
SP ^ SP & (-32) // round the stack pointer down to a 0 mod 32 boundary 
XD-^ 0 // inform callee that caller uses X86 calling conventions ^ 328 

case "01 " // resuming an X86 thread suspended during execution of a native routine 
if the redundant copies of the save slot number in EAX and EDX do not match or if y^j^ 
the redundant copies of the timestamp in EBX:ECX and ESI:EDI do not match { J 
// some forni of bug or thread corruption has been detected 
goto TAPESTRY_CRASH_SYSTEM( thread-corruption-error-code ) --^ 372 

save the EBXfCX timestamp in a 64-bit exception handler temporary register 1 
(this will not be overwritten during restoration of the full native context) J . 
use save slot number in EAX to locate actual save slot storage^374 
restore full entire native context (includes new values for all x86 registers) -^375 
if save slot's timestamp does not match the saved timestamp { "^376 
// save slot has been reallocated; save slot exhaustion has been detected 
gotoTAPESTRY_CRASH_SYSTEM( save-slot-ovenwritten-error-code )-^3^^ 

} '^78 

free the save slot , , . . 

case'lO" // returning from X86 callee to native caller, result already in registers ^ 
RV0<63 32>-^edx<31:00> // in case result is 64 bits —333 I 030 
convert ihe FP top-of-stack value from 80 bit X86 fomi to 64-bit form in RVDP ~*--^334 ( 

Sp-»_ESI // restore SP from time of call — ■ — 337 J 

case"11" // retuming from X86 callee to native caller, load large result from memory ^ 
RV0..RV3 ^ load 32 bytes from [ESI-32] // (guaranteed naturally aligned) L 329 

SP-^ESI // restore SP from time of call -V337 J 

EPC*-EPC & -4 // reset the two low-order bits to zero ~v 335 
'^''^"^338 
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340 

/ 

Tapestry-to-X86 transition exception handler 

// This handler is entered under the following conditions: 
//la native caller invoices an x86 function 
// 2. a native function returns to an x86 caller 
switch on XD<3:0>{ ^^^^ 

XD_RET_FP: // result type is floating point 

FO/FI — FlNFUVrE.de( RVDP) // X86 FP results are 80 bits 
SP ^ from RXA save // discard RXA, pad , args 

FPCW-*-image after FINIT & push // FP stack has 1 entry 
goto EXIT 

XD_RET_WRITEBACK: // store result to @RVA, leave RVA in eax 

RVA-*-from RXA save // address of result area 

copy decode(XD<8:4>) bytes from RV0..RV3 to [RVA] 
eax-^ RVA // X86 expects RVA in eax 

SP-^from RXA save // discard RXA. pad, args 

FPCW— image after FINIT // FP stack is empty 

goto EXIT 

XD_RET_SCALAR: // result in eax:eda 

edx<31 :00> ^ eax<63:32> // in case result is 64 bits 
SP-^from RXA save // discard RXA, pad, args 

FPCW^image after FINIT // FP stack is empty 

goto EXIT 

XD_CALL_HIDDEN TEMP: // allocate 32 byte aligned hidden temD^343 
esi-*-SP // stack cut back on return 

SP-^SP-32 //allocate max size temp I344 

RVA— SP // RVA consumed later by RR J 

LR<1:0>**-"11" //flag address for return & reload 

gotoCALLCOMMON 

default: // remaining XD_CALL_xxx encodings 

esi— SP // stack cut back on return ^« 

LR<1 :0> —"1 0" // flag address for return f f 
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-345 



CALL.COMMON: ^347 ^46 

interpret XD to push and/or reposition args -J 
f-SPl LR // push LR as return address ' 

EXIT: !'348 
setup emulator context and profiling ring buffer pointer 

RFE // to original target 

} 

FIG. 31 



350 
/ 

interrupt/exception handler of Tapestry operating system: , J 

II Control vectors here when a synchronous exception or asynchronous interrupt is to be 
// exported to / manifested in an x86 machine. 

//The interrupt is directed to something within the virtual X86, and thus there is a possibility 
// that the X86 operating system will context switch. So we need to distinguish two cases: 
// either the running process has only X86 state that is relevant to save, or 
// there is extended state that must be saved and associated with the current machine context 
// (e.g., extended state in a Tapestiy library call in behalf of a process managed by X86 OS) 
if execution was inter-upted in the converter - EPC.ISA == X86 { 1 
// no dependence on extended/native state possible, hence no need to save any ?-oot 
gotoEM86_DeliverJnterrupt(interrupt-byte) J 

}elseifEPC.Taxi_Active{ . -r • •„ „u • » ^ 

// ATaxi translated version of some X86 code was running. Taxi will rollback to an 
//x86 instruction boundary. Then, if the rollback was induced by an asynchronous external 
// interrupt, Taxi will deliver the appropriate x86 interrupt. Else, the rollback was induced 1 
// by a synchronous event so Taxi will resume execution in the converter, retriggering the 
// exception but this time with EPC.ISA == X86 
goto TAXi RoIlback( asynchronous-flag, interrupt-byte ) 

}elseifEPC.EM86{ . . • . ^. „ r u 

// The emulator has been interrupted. The emulator is coded to allow for such 
// conditions and permits re-entry during long running routines (e.g. far call through a gate) ^ 354 
// to deliver external interrupts 
goto EM86_DeliverJntermpt( interrupt-byte ) 



} else { 



// This is the most difficult case - the machine was executing native Tapestry code on 
// behalf of an X86 thread. The X86 operating system may context switch. We must save 
// all native state and be able to locate it again when the x86 thread is resumed. 
r36l 

allocate a free save slot; if unavailable free the save slot with oldest timestamp and try again 
save the entire native state (both the X86 and the extended state) 1 352 
save the X86 EIP in the save slot . ^ , J ^363 . 

overwrite the two low-order bits of EPC with "01" (will become X86 interrupt EIP) ^ > 360 
store the 64-bit timestamp in the save slot, in the X86 EBX:ECX register pair (and, ^ 
for further security, store a redundant copy in the X86 ESI:EDI register pair) j 
store the a number of the allocated save slot in the X86 EAX register (and, again 
further security, store a redundant copy in the X86 EDX register) j 



goto EM86_DeliverJnterrupt( interrupt-byte ) 
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typedef struct { 
save_slot_t * 
save_slot_t * 
unsigned int64 
unsigned int64 
unsigned int64 

timestampj 
int 

boolean 
} save_slot_t; 



newer, // pointer to next-most-recently-allocated save slot' 
older; // pointer to next-older save slot 

epc; //saved exception PC/IP 

pew; // saved exception PCW (program control word) 

registers[63]; // save the 63 writeable general registers 

// other words of Tapestry context 
timestamp; // timestamp to detect buffer overrun \ ^ 
save_slotJD; //IDnurriberofthesaveslot^ 
save slot is full; // full /empty flag 357 
" " " ^359 
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►379c 



^356 



■ 355 



save_slot_t* 
save slot t* 



save_slot_head; 
save_slot_tail; 



//.pointer to the head of the queue > 
// pointer to the tail of the queue -n 379a 
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HANDLER: RISC TO x86 

XD CONTAINS RETURN-DESCRIPTOR: 
INTERPRET XD: 342 
• REFORMAT / REPOSTION RESULT 
-LOADFPCW 

SP — [SP] // POP RA AND ARGS ^ 



XD CONTAINS CALL-DESCRIPTOR: 
ESI— SP 

INTERPRET XD, REPOSITION ARGS 
LR<1:0>— IxPERXD 
PUSH LRASRA(RETADDR) 




^320 
HANDLER: x86 TO RISC 



EPC<1:0>==00: 
LR — (SP] 
SP — SP + 4 
AP — SP 
SP — SP-8 
SP — SP&(-32) 
XD — 0 
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EPC<1:0>==01: 
x86 REGS POINTS TO SAVE SLOT 
USING TS VERIFY NO OVERWRITE 
RESTORE FULL STATE 
FREE SAVE SLOT 
EPC<1:0> — 00 
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HANDLER: RISC TO x86 



XD CONTAINS RETURN-DESCRIPTOR: 
INTERPRET XD: 
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— HANDLER: x86 TO RISC 
EPC<1;0>==00: 

LR— [SP] 

SP— SP + 4 

AP— SP 
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EPC<1:0>==01: 
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USING TS VERIFY NO OVERWRITE 
RESTORE FULL STATE 
FREE SAVE SLOT 
EPG<1:0>— 00 
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